Mailchimp

5 CVEs across 4 Mailchimp products. Browse Mailchimp vulnerabilities, severities, and proof-of-concept exploits.

Mailchimp products with known CVEs

ProductCVEs
Mailchimp For Woocommerce2
Easy Mailchimp Forms Plugin1
Mailchimp For Woocommerce1
Mailchimp List Subscribe Form1
Mailchimp CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-73346High7.62026-08-13Administrator SQL Injection in MailChimp For WooCommerce < 6.2 versions.
CVE-2025-12172Medium4.32026-02-19The Mailchimp List Subscribe Form plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.0. This is due to…
CVE-2022-2556Low2.72022-08-29The Mailchimp for WooCommerce WordPress plugin before 2.7.2 has an AJAX action that allows high privilege users to perform a POST request on behalf of the serv…
CVE-2022-2267Medium4.32022-08-29The Mailchimp for WooCommerce WordPress plugin before 2.7.1 has an AJAX action that allows any logged in users (such as subscriber) to perform a POST request o…
CVE-2014-71522014-09-26Cross-site scripting (XSS) vulnerability in the Easy MailChimp Forms plugin 3.0 through 5.0.6 for WordPress allows remote attackers to inject arbitrary web scr…